They are claiming that it is privacy preserving, since it uses AI and not humans, and only for catching csam

Assuming those claims are true(I know, that is a big ask, but they claim it) what function do exceptions provide unless they are purposely giving those exceptions for the production and distribution of csam by those groups?

More likely their claims of the privacy and/or purpose are false.